Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/3138372e31372e3132382e302f32342d3234203d3e20323730363131.roa
File:                     3138372e31372e3132382e302f32342d3234203d3e20323730363131.roa (raw, json)
Hash identifier:          hCNw3JZv/wLg+im0QJK7oO2IchJ9w4byH1NyXW8YMsc=
Subject key identifier:   39:B0:44:79:93:1B:74:5D:E5:50:D4:D6:6C:AD:EA:7A:9C:EF:28:E9
Certificate issuer:       /CN=797EBC77EC40E28B81969DE1FED28595E33FA7CB
Certificate serial:       114EEB0D312442C8E015A1002A1BE7B4D428F372
Authority key identifier: 79:7E:BC:77:EC:40:E2:8B:81:96:9D:E1:FE:D2:85:95:E3:3F:A7:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797EBC77EC40E28B81969DE1FED28595E33FA7CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/3138372e31372e3132382e302f32342d3234203d3e20323730363131.roa
Signing time:             Fri 21 Aug 2026 11:28:54 +0000
ROA not before:           Fri 21 Aug 2026 11:23:54 +0000
ROA not after:            Fri 20 Aug 2027 11:28:54 +0000
asID:                     270611
IP address blocks:        187.17.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/797EBC77EC40E28B81969DE1FED28595E33FA7CB.crl
                          rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/797EBC77EC40E28B81969DE1FED28595E33FA7CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797EBC77EC40E28B81969DE1FED28595E33FA7CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 21:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4e:eb:0d:31:24:42:c8:e0:15:a1:00:2a:1b:e7:b4:d4:28:f3:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797EBC77EC40E28B81969DE1FED28595E33FA7CB
        Validity
            Not Before: Aug 21 11:23:54 2026 GMT
            Not After : Aug 20 11:28:54 2027 GMT
        Subject: CN=39B04479931B745DE550D4D66CADEA7A9CEF28E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c7:eb:ce:6b:d1:39:0e:30:1c:cc:17:24:76:
                    a1:ce:b0:e2:20:f4:2b:5f:1e:a9:1d:7a:12:77:f6:
                    20:d3:d3:ea:55:16:b8:0c:54:24:5d:40:af:e6:5e:
                    4b:76:49:64:70:34:a1:ed:c0:35:84:f1:b8:b5:77:
                    66:c8:70:e8:a2:58:46:26:e2:f2:a7:7a:cc:dc:97:
                    54:3c:d6:b7:75:fc:33:77:90:3d:6c:f3:db:f8:c3:
                    08:2f:95:45:77:a4:32:5f:30:db:09:6d:ca:7a:80:
                    de:2b:a1:14:2c:96:d2:0a:08:af:9c:d1:68:14:54:
                    e5:22:82:fd:bf:43:02:92:3e:e8:23:73:b6:3a:18:
                    1a:f3:19:78:79:a1:64:e9:6c:79:c5:8b:40:af:89:
                    6e:e3:a4:f8:5b:76:ce:94:e9:ea:ef:06:4d:4f:fa:
                    a6:b4:06:d9:53:9a:40:77:a9:71:71:b2:c7:7c:5e:
                    4c:06:61:41:b4:12:bd:c8:73:2d:d4:28:64:b8:e9:
                    24:6b:6f:e4:11:9d:54:9d:83:47:4b:b2:32:b8:73:
                    5e:ae:f4:3a:65:cd:54:a2:01:4f:97:72:d7:0a:93:
                    ab:5c:f1:dd:58:15:72:91:ed:1f:a1:39:40:ad:36:
                    8f:67:11:75:8b:bb:b4:18:b0:8c:b3:c6:e4:b6:70:
                    4b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B0:44:79:93:1B:74:5D:E5:50:D4:D6:6C:AD:EA:7A:9C:EF:28:E9
            X509v3 Authority Key Identifier:
                keyid:79:7E:BC:77:EC:40:E2:8B:81:96:9D:E1:FE:D2:85:95:E3:3F:A7:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/797EBC77EC40E28B81969DE1FED28595E33FA7CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/797EBC77EC40E28B81969DE1FED28595E33FA7CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgRrTW6Vv72cZvhworxW3eAXuzjwNvkMA86G2gm62YiQ/0/3138372e31372e3132382e302f32342d3234203d3e20323730363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:12:d8:86:0b:02:24:3d:94:69:30:68:5b:e9:c5:00:e5:5a:
         56:3b:e8:e8:d2:2a:4e:da:aa:21:0f:da:b0:9f:58:a8:a7:49:
         1e:e3:93:fe:b7:76:d3:cc:8e:5a:a8:3b:0b:a6:bf:30:0e:74:
         b2:89:65:7a:05:99:09:b5:24:90:4b:07:af:ea:4e:99:7f:90:
         1b:3f:37:12:b1:44:55:a3:07:7c:3b:aa:8d:2c:6a:ec:62:87:
         d6:4d:ff:ca:b7:29:e9:d4:31:a3:e4:d9:c2:5d:2b:63:57:d0:
         65:7d:56:2d:c9:6f:cf:46:60:71:c2:9f:d7:88:25:74:4a:c0:
         fe:4f:31:8f:6e:bc:85:b8:eb:5b:61:c6:2f:c0:11:e2:7f:ea:
         52:cf:dd:ba:a6:af:07:3a:0a:ba:42:a7:e3:1b:d4:74:9f:bc:
         e8:61:69:3b:52:ea:ec:54:67:e5:44:4c:3a:0e:60:4e:e2:94:
         73:c1:34:51:42:f3:45:b3:0e:f1:62:54:75:cf:50:c2:c1:34:
         a3:86:95:59:21:02:64:8b:ca:34:76:c1:ea:f0:f0:52:fc:6d:
         ff:9a:11:9f:cb:34:50:89:77:77:00:57:3f:79:9b:3c:c1:17:
         2c:6e:70:f8:4a:8d:fe:00:15:cd:5d:ec:ef:98:f7:9d:c1:dd:
         75:65:c8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 06:02:45 2026 by rpki-client